Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d3b00db7-e7bb-31ac-8985-58fc1dc8c085.roa
File:                     d3b00db7-e7bb-31ac-8985-58fc1dc8c085.roa (raw, json)
Hash identifier:          G9O0zSV4vW70bzBEFvSjaYQWLJCk/ia0tq/zr2igwyQ=
Subject key identifier:   D6:DE:B0:FB:A9:C7:D8:98:3F:09:56:99:25:4C:00:8D:65:2A:DD:57
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845191A9730172A1A1F4756A380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d3b00db7-e7bb-31ac-8985-58fc1dc8c085.roa
Signing time:             Mon 04 Mar 2024 17:34:52 +0000
ROA not before:           Mon 04 Mar 2024 17:34:52 +0000
ROA not after:            Sun 02 Jun 2024 16:34:52 +0000
asID:                     834
IP address blocks:        206.206.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 16:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:19:1a:97:30:17:2a:1a:1f:47:56:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  4 17:34:52 2024 GMT
            Not After : Jun  2 16:34:52 2024 GMT
        Subject: CN=333266d2-e79d-4552-bb73-797fe9c97c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:8c:99:33:04:a5:10:15:e0:77:ec:2d:5c:
                    cb:aa:24:cc:32:b7:97:d3:09:49:99:07:a0:4b:e4:
                    a2:b7:91:82:7c:bb:ca:f1:e6:e0:f0:bb:29:5f:84:
                    29:66:05:d4:f2:d5:ac:a3:14:d9:e8:48:dc:55:eb:
                    de:74:c4:c2:7b:0c:bb:fc:58:bb:b1:de:18:3b:7d:
                    8f:fc:84:b0:23:c4:88:f0:3d:08:2f:54:92:6b:ef:
                    e1:e1:01:22:d7:f1:42:19:63:fd:e3:fc:f5:c3:99:
                    9b:e6:e6:73:cc:83:05:7d:2a:6c:76:cc:59:a3:e4:
                    55:25:83:26:c7:70:58:4c:d4:6c:8f:4f:33:be:16:
                    3d:26:ba:d3:e0:d8:88:b3:80:fc:99:2c:16:1c:d4:
                    5b:0e:31:61:77:f8:e3:24:40:02:ca:64:be:0c:ef:
                    a2:d9:9c:3a:ad:d4:15:08:f5:87:4e:c4:0d:1f:f7:
                    8b:c6:e6:d6:13:13:1d:65:f5:44:06:94:b9:c0:67:
                    0e:54:0b:6b:ca:a4:1d:23:97:b6:26:96:1e:19:7e:
                    4c:50:12:ec:17:93:3f:f8:d1:8f:f6:92:26:9e:87:
                    c7:97:a0:4a:2e:cc:c0:22:2b:77:a6:1a:5d:3d:5f:
                    1e:3a:cb:1e:b7:da:81:23:7f:01:90:22:ea:ec:06:
                    fb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DE:B0:FB:A9:C7:D8:98:3F:09:56:99:25:4C:00:8D:65:2A:DD:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d3b00db7-e7bb-31ac-8985-58fc1dc8c085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:1f:34:12:92:b0:eb:15:f8:ae:ec:3b:72:0c:55:00:00:9b:
         d9:5b:d4:47:c4:e4:b3:e9:7a:ce:8d:67:90:82:f6:74:11:3d:
         65:78:72:05:d5:bf:0a:09:5b:81:d8:38:f1:56:5a:53:92:ab:
         38:ed:ee:f8:60:d5:c2:71:03:b6:1a:ac:74:93:a9:4c:e6:98:
         83:21:c1:c2:8a:d7:3f:d4:f6:9f:f3:d3:1f:5e:2a:5a:65:99:
         ff:44:b7:33:1c:03:f0:5b:30:c9:35:07:e6:af:f2:c8:e8:48:
         8d:e6:55:33:a5:75:4f:27:34:27:8e:f9:5b:87:ea:13:43:d6:
         1f:42:b8:8a:eb:67:71:ad:c9:cb:4b:e1:39:8e:f9:10:00:dd:
         7a:11:8b:bc:1f:28:b3:9c:8d:60:f5:c2:58:6d:42:d2:14:e8:
         5a:28:ac:39:0c:ee:ae:aa:88:23:6a:5c:ef:c5:4f:b4:21:1f:
         bb:fa:6e:2a:4d:92:e2:e8:c7:d9:87:d9:c0:59:a9:30:0f:96:
         d3:0d:ec:67:0c:55:9a:7e:b8:20:7d:a3:b9:07:8b:cf:b7:b5:
         bf:92:28:f8:81:35:aa:85:9c:0d:0c:5d:22:f8:8a:e9:f2:08:
         cf:8b:8b:a7:01:38:3d:50:2f:4d:66:4a:51:00:4d:be:f9:a7:
         23:21:42:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 19:48:47 2024 by rpki-client on console-fra.rpki-client.org